Sensitive Information Exposure in IBM InfoSphere Information Server
CVE-2024-43186

5.3MEDIUM

Key Information:

Vendor
IBM
Status
Infosphere Information Server
Vendor
CVE Published:
29 March 2025

Summary

IBM InfoSphere Information Server 11.7 contains a vulnerability that may allow authenticated users to access and retrieve sensitive information intended to be secure. This issue arises under specific conditions, potentially compromising data integrity and confidentiality. Organizations utilizing this software should evaluate their security measures to mitigate risks associated with unauthorized access to sensitive locally stored information.

Affected Version(s)

InfoSphere Information Server 11.7

References

https://www.ibm.com/support/pages/node/7184980
vendor-advisory

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.